Skip to contentMozilla Firefox vulnerabilities
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is...CVE-2018-18504Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreWhen JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash...CVE-2018-18503Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 64. Some...CVE-2018-18502Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- mozilla firefoxCross-origin images can be read from a canvas element in violation of the same-origin policy...CVE-2018-18511Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreLimitations on the URIs allowed to WebExtensions by the browser.windows.create API can be...CVE-2018-18497Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtension content scripts can be loaded into about: pages in some circumstances, in violation...CVE-2018-18495Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2018-12407Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 63. Some...CVE-2018-12406Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreDuring HTTP Live Stream playback on Firefox for Android, audio data can be accessed across...CVE-2018-123918.8 High
- mozilla firefoxA service worker can send the activate event on itself periodically which allows it to run...CVE-2018-5179Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed...CVE-2018-12403Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe internal WebBrowserPersist code does not use correct origin context for a resource being...CVE-2018-12402Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreSome special resource URIs will cause a non-exploitable crash if loaded with optional parameters...CVE-2018-12401Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWhen a new protocol handler is registered, the API accepts a title argument which can be used to...CVE-2018-12399Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreBy using the reflected URL in some special resource URIs, such as chrome:, it is possible to...CVE-2018-12398Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA WebExtension can request access to local files without the warning prompt stating that the...CVE-2018-12397Fix available7.1 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...CVE-2018-12396Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...CVE-2018-12395Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...CVE-2018-12393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreWhen manipulating user events in nested loops while opening a document through script, it is...CVE-2018-12392Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 62 and...CVE-2018-12390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....CVE-2018-12389Fix available8.8 High
- mozilla firefox, canonical ubuntu linux +1 moreMozilla developers and community members reported memory safety bugs present in Firefox 62. Some...CVE-2018-12388Fix available8.8 High
- mozilla firefoxThe displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in...CVE-2018-123825.3 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...CVE-2018-12387Fix available9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...CVE-2018-12386Public exploitFix availableEPSS 13.5%8.1 High
- mozilla firefox, firefox esr +1 moreManually dragging and dropping an Outlook email message into the browser will trigger a page...CVE-2018-123815.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...CVE-2018-12379Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...CVE-2018-12385Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using a meta...CVE-2018-18499Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption...CVE-2018-12375Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWindows 10 does not warn users before opening executable files with the SettingContent-ms...CVE-2018-123688.1 High
- apache spark, mozilla firefox +1 moreExposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URLCVE-2018-8024Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...CVE-2018-5187Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption...CVE-2018-5186Fix available9.8 Critical
- Show moreLoading…